Huawei p8 Firmware vulnerabilities

22 CVEs affecting Huawei p8 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-2698, published 2017-11-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-8088, published 2016-01-12. High severity, CVSS 7.8. EPSS: 3.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00…
CVE-2015-8306, published 2016-01-12. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. Buffer overflow in the HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before…
CVE-2017-2693, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150…
CVE-2017-2692, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and…
CVE-2017-2698, published 2017-11-22. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a…
CVE-2015-8678, published 2017-03-24. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10…
CVE-2015-8337, published 2016-01-12. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, GRA-UL10…
CVE-2015-8319, published 2016-04-07. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before…
CVE-2015-8318, published 2016-04-07. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before…
CVE-2015-8681, published 2016-04-07. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. The ovisp driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and…

Latest

CVE-2015-8224, published 2017-09-20. Low severity, CVSS 3.7. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei P8 before GRA-CL00C92B210, before GRA-L09C432B200, before GRA-TL00C01B210, and before GRA-UL00C00B210 allows remote attackers to obtain user equipment (aka UE) measurements of signal strengths.
CVE-2016-8794, published 2017-04-02. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software…
CVE-2016-8793, published 2017-04-02. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software…
CVE-2016-8792, published 2017-04-02. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software…
CVE-2016-8791, published 2017-04-02. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software…
CVE-2016-8774, published 2017-04-02. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL00C92B386, versions before NXT-DL00C17B386, versions before NXT-TL00C01B386; Mate S phones…